last executing test programs: 7.35469627s ago: executing program 0 (id=3949): syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200122030109021b0002000000000904250000ff0120000904"], 0x0) 6.197224603s ago: executing program 0 (id=3988): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.264784895s ago: executing program 2 (id=4033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@acquire={0x134, 0x17, 0x1, 0x70bd25, 0x25dfdbfe, {{@in6=@mcast2, 0x4d5, 0x33}, @in=@multicast2, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1, 0x4e20, 0x1fe, 0x4e21, 0x9, 0x2, 0x0, 0x80, 0x21}, {{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x9, 0x4e20, 0xc6a, 0xa, 0x80, 0xa0, 0x5e}, {0x5, 0x7, 0x4, 0x800, 0x874, 0xe, 0x1ff, 0x6}, {0xf, 0xffffffff, 0x851f, 0xd3}, 0x6, 0x6e6bba, 0x2, 0x0, 0x1, 0x3}, 0x81, 0x0, 0xe, 0x70bd2d}, [@mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x40080c0) 5.264554146s ago: executing program 2 (id=4035): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 5.194941742s ago: executing program 2 (id=4037): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/106, 0x6a, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 5.134716444s ago: executing program 2 (id=4041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e00000024000280140005d9c95f6cafba6b8f00000000000000000104001200050016"], 0x58}}, 0x0) 5.073664671s ago: executing program 2 (id=4043): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.562270565s ago: executing program 0 (id=4062): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) 4.561976087s ago: executing program 0 (id=4064): syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000240)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xef}, @initial, @broadcast, @broadcast, {0x5, 0x9}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @a_msdu}, 0x1c) 4.44472998s ago: executing program 3 (id=4067): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 4.161725975s ago: executing program 1 (id=4075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xc1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}}, 0x0) 4.104851615s ago: executing program 1 (id=4076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xffffffffffffff77}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.104585287s ago: executing program 1 (id=4077): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) close(r1) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) sendmsg$kcm(r0, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000740)={0x0}) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r10, 0x21) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, &(0x7f0000000040)) r11 = openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r11, &(0x7f0000000140)=ANY=[@ANYBLOB="2b000000040000000000000000000000010000000000000001000000000000000300000000000001000000"], 0x2b) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r12, 0x3, r4, 0x5}) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000140)={0x3, 0x2, 0x10}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24000008}, 0x2004c081) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 3.964735524s ago: executing program 0 (id=4078): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400", @ANYRES16], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x4c) close(r4) creat(&(0x7f0000000440)='./file0\x00', 0x188) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.562257032s ago: executing program 3 (id=4079): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4}, 0x50) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) creat(&(0x7f0000000000)='./file0\x00', 0x23) 2.155029468s ago: executing program 3 (id=4080): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="003b9b9d", 0x4, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) close(r9) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_fuse_handle_req(r10, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2009089, &(0x7f0000000200)={'trans=virtio,', {[{@privport}, {@aname={'aname', 0x3d, 'overlay\x00'}}, {@dfltuid}], [{@subj_user={'subj_user', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x39, 0x67, 0x37, 0x33, 0x61, 0x37], 0x2d, [0x37, 0x62, 0x61, 0x33], 0x2d, [0x35, 0x33, 0x62, 0x66], 0x2d, [0x37, 0x39], 0x2d, [0x32, 0x37, 0x65, 0x31, 0x64, 0x65, 0x0, 0x30]}}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) shutdown(r0, 0x1) 1.241808606s ago: executing program 3 (id=4081): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x4c) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, &(0x7f00000001c0)=@userptr={0x400, 0x2, 0x4, 0x0, 0x3, {}, {0x1, 0x8, 0x9, 0x4, 0xfb, 0x4, "72fd7599"}, 0xf91, 0x2, {0x0}, 0x8}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0xffff, 0x6, 0x4, 0x27ff, 0x2800, 0x42, 0xbb6, 0x19, 0x8, {0x8, 0x802}, 0xd0, 0x7}}) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 1.050640849s ago: executing program 1 (id=4082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x4c) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, &(0x7f00000001c0)=@userptr={0x400, 0x2, 0x4, 0x0, 0x3, {}, {0x1, 0x8, 0x9, 0x4, 0xfb, 0x4, "72fd7599"}, 0xf91, 0x2, {0x0}, 0x8}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0xffff, 0x6, 0x4, 0x27ff, 0x2800, 0x42, 0xbb6, 0x19, 0x8, {0x8, 0x802}, 0xd0, 0x7}}) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 754.521067ms ago: executing program 0 (id=4083): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)=0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) r6 = socket(0x2, 0x3, 0x100000001) getsockopt$MRT(r6, 0x0, 0xce, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4}, 0x50) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r4}, 0x10) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) creat(&(0x7f0000000000)='./file0\x00', 0x23) 129.42301ms ago: executing program 3 (id=4084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x101100) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01080000f0ff020000000b00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x40000) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000040), 0x12) r13 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000180)=ANY=[@ANYBLOB="2b7069647320ad888005bbe4d0faaa5b837a1036fa827bd69ef83edce045b1f140c0280aaa33f7f580f7d23c5f2311ee24"], 0x6) 126.220003ms ago: executing program 1 (id=4091): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x7e7) 32.737044ms ago: executing program 1 (id=4085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r2], 0x1, 0x80800}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x24048880) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x2000, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @random="61ce2df72472"}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140)={0x70, 0xc3, 0x40000}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) 18.111875ms ago: executing program 3 (id=4086): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x498, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x498}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f72030000003078303030303030312c00"]) socket(0x18, 0x1, 0xff) 0s ago: executing program 2 (id=4073): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x62040200) kernel console output (not intermixed with test programs): ltsetting 0 [ 167.145412][ T5929] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 167.149445][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.154976][ T5929] usb 6-1: config 0 descriptor?? [ 167.165050][ T5929] hub 6-1:0.0: bad descriptor, ignoring hub [ 167.167958][ T5929] hub 6-1:0.0: probe with driver hub failed with error -5 [ 167.462507][ T6023] wacom 0003:056A:0004.000B: unknown main item tag 0x0 [ 167.465507][ T6023] wacom 0003:056A:0004.000B: unknown main item tag 0x0 [ 167.533387][T10621] bond3: option downdelay: invalid value (18446744073709551609) [ 167.535927][T10621] bond3: option downdelay: allowed values 0 - 2147483647 [ 167.568304][T10621] bond3 (unregistering): Released all slaves [ 167.584032][ T5929] plantronics 0003:047F:C055.000C: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.1-1/input0 [ 167.659543][ T6023] usb 8-1: USB disconnect, device number 27 [ 168.263464][T10634] ip6gretap0 speed is unknown, defaulting to 1000 [ 168.632475][ T6005] usb 6-1: USB disconnect, device number 29 [ 168.683612][T10642] ip6gretap0 speed is unknown, defaulting to 1000 [ 168.717724][T10643] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1973'. [ 169.389407][T10670] 9pnet_fd: Insufficient options for proto=fd [ 169.724770][T10681] ip6gretap0 speed is unknown, defaulting to 1000 [ 169.727035][T10682] bridge0: port 3(netdevsim0) entered blocking state [ 169.730821][T10682] bridge0: port 3(netdevsim0) entered disabled state [ 169.734182][T10682] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 169.739755][T10682] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 169.742789][T10682] bridge0: port 3(netdevsim0) entered blocking state [ 169.745273][T10682] bridge0: port 3(netdevsim0) entered forwarding state [ 169.998328][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'. [ 170.200510][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.204141][ T5953] Bluetooth: hci3: command 0x0405 tx timeout [ 170.204630][ T5939] Bluetooth: hci2: command 0x0406 tx timeout [ 170.206696][ T5953] Bluetooth: hci1: command 0x0406 tx timeout [ 170.234877][T10723] program syz.1.2008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.334919][T10730] mmap: syz.0.2011 (10730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 170.463210][T10738] 9pnet_fd: Insufficient options for proto=fd [ 170.780085][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.793789][ T9146] syz_tun (unregistering): left allmulticast mode [ 170.799612][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.808280][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.829977][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.832675][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.852071][T10757] Bluetooth: MGMT ver 1.23 [ 170.856447][T10750] ip6gretap0 speed is unknown, defaulting to 1000 [ 171.040218][T10750] chnl_net:caif_netlink_parms(): no params data found [ 171.145157][T10750] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.147577][T10750] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.150600][T10750] bridge_slave_0: entered allmulticast mode [ 171.153344][T10750] bridge_slave_0: entered promiscuous mode [ 171.156632][T10750] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.159401][T10750] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.161745][T10750] bridge_slave_1: entered allmulticast mode [ 171.164497][T10750] bridge_slave_1: entered promiscuous mode [ 171.260684][T10750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.265470][T10750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.314234][T10750] team0: Port device team_slave_0 added [ 171.317594][T10750] team0: Port device team_slave_1 added [ 171.359971][T10750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.362828][T10750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.372766][T10750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.379136][T10750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.381551][T10750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.392563][T10750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.396240][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 171.400728][T10802] tc_dump_action: action bad kind [ 171.475136][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 171.483205][T10750] hsr_slave_0: entered promiscuous mode [ 171.485580][T10750] hsr_slave_1: entered promiscuous mode [ 171.488077][T10750] debugfs: 'hsr0' already exists in 'hsr' [ 171.489940][T10750] Cannot create hsr debugfs directory [ 171.546165][T10819] netlink: 822 bytes leftover after parsing attributes in process `syz.0.2049'. [ 171.549265][T10819] bridge: RTM_NEWNEIGH with unconfigured vlan 265 on bridge0 [ 171.566208][T10817] ip6gretap0 speed is unknown, defaulting to 1000 [ 171.584273][T10822] overlayfs: failed to resolve './file0': -2 [ 171.659131][ T6023] kernel write not supported for file /ppp (pid: 6023 comm: kworker/1:4) [ 171.698130][ T59] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 171.849438][ T59] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 171.853400][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.860794][ T59] usb 8-1: config 0 descriptor?? [ 171.865940][ T59] cp210x 8-1:0.0: cp210x converter detected [ 171.951742][T10840] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2058'. [ 171.954903][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2058'. [ 172.272665][ T59] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 172.479889][ T59] usb 8-1: cp210x converter now attached to ttyUSB0 [ 172.678471][ T59] usb 8-1: USB disconnect, device number 28 [ 172.684521][ T59] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 172.690404][ T59] cp210x 8-1:0.0: device disconnected [ 172.917894][ T5952] Bluetooth: hci4: command tx timeout [ 173.027824][ T6023] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 173.177802][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 173.183905][ T6023] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 173.186874][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.190820][ T6023] usb 5-1: config 0 descriptor?? [ 173.197471][ T6023] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 173.777836][ T29] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 173.947834][ T59] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 173.947903][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 173.953628][ T29] usb 8-1: config 0 has an invalid interface number: 72 but max is 0 [ 173.956375][ T29] usb 8-1: config 0 has no interface number 0 [ 173.958490][ T29] usb 8-1: config 0 interface 72 has no altsetting 0 [ 173.962695][ T29] usb 8-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 173.965695][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.968443][ T29] usb 8-1: Product: syz [ 173.970027][ T29] usb 8-1: Manufacturer: syz [ 173.972113][ T29] usb 8-1: SerialNumber: syz [ 173.976965][ T29] usb 8-1: config 0 descriptor?? [ 174.097838][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 174.101130][ T59] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 174.104459][ T59] usb 6-1: config 0 has no interface number 0 [ 174.107008][ T59] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 174.111460][ T59] usb 6-1: config 0 interface 196 has no altsetting 0 [ 174.115783][ T59] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 174.120817][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.125046][ T59] usb 6-1: Product: syz [ 174.126815][ T59] usb 6-1: Manufacturer: syz [ 174.128943][ T59] usb 6-1: SerialNumber: syz [ 174.132156][ T59] usb 6-1: config 0 descriptor?? [ 174.135471][T10864] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 174.199439][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.201814][ T29] usb 8-1: MIDIStreaming interface descriptor not found [ 174.217283][ T29] usb 8-1: USB disconnect, device number 29 [ 174.279094][T10866] udevd[10866]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.72/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.345341][ T59] ipheth 6-1:0.196: Unable to find endpoints [ 174.349844][ T59] usb 6-1: USB disconnect, device number 30 [ 174.609306][ T6023] gspca_vc032x: reg_w err -71 [ 174.610951][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.612749][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.614493][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.616245][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.618113][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.619843][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.621574][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.623416][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.625149][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.626875][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.628722][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.630456][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.632175][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.633969][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.635694][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.637415][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.639232][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.640955][ T6023] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.642688][ T6023] gspca_vc032x: Unknown sensor... [ 174.644471][ T6023] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 174.648330][ T6023] usb 5-1: USB disconnect, device number 23 [ 174.993651][T10885] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2077'. [ 175.007861][ T5952] Bluetooth: hci4: command tx timeout [ 175.178126][T10897] program syz.0.2083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.198975][ T5980] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 176.283914][T10942] ip6gretap0 speed is unknown, defaulting to 1000 [ 176.347830][ T5980] usb 8-1: Using ep0 maxpacket: 16 [ 176.354962][ T5980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.358845][ T5980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.362093][ T5980] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.366626][ T5980] usb 8-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 176.370860][ T5980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.377125][ T5980] usb 8-1: config 0 descriptor?? [ 176.637912][ T5946] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 176.697938][ T59] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 176.704434][T10750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.711400][T10750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.715858][T10750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.725281][T10750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.773721][T10750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.782702][T10750] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.787602][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.788850][ T5946] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 176.790010][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.795203][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.798082][ T5980] hid-generic 0003:045E:00DA.000D: ignoring exceeding usage max [ 176.798612][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.801779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.804225][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.806578][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.809396][ T5980] hid-generic 0003:045E:00DA.000D: unbalanced collection at end of report description [ 176.809840][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.809864][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.809878][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.810607][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.810629][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.810642][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.811340][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.816614][ T5980] hid-generic 0003:045E:00DA.000D: probe with driver hid-generic failed with error -22 [ 176.818839][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.844592][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.847524][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.849443][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.850826][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.858523][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.862639][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.864248][ T59] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 176.865555][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.868774][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.872490][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.875036][ T59] usb 6-1: Product: syz [ 176.878293][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.879993][ T59] usb 6-1: Manufacturer: syz [ 176.881588][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.883186][ T59] usb 6-1: SerialNumber: syz [ 176.886771][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.890516][ T59] usb 6-1: config 0 descriptor?? [ 176.892044][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.895560][ T5946] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.896560][ T59] hub 6-1:0.0: bad descriptor, ignoring hub [ 176.899351][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.901251][ T5946] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 176.902067][ T59] hub 6-1:0.0: probe with driver hub failed with error -5 [ 176.903911][ T5946] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 176.908530][ T59] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.909458][ T5946] usb 5-1: Product: syz [ 176.916253][ T5946] usb 5-1: Manufacturer: syz [ 176.917991][ T5946] usb 5-1: SerialNumber: syz [ 176.922332][ T5946] usb 5-1: config 0 descriptor?? [ 176.923077][ T59] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 176.934927][ T5946] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.935910][T10750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.947076][T10867] udevd[10867]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.970604][T10750] veth0_vlan: entered promiscuous mode [ 176.976920][T10750] veth1_vlan: entered promiscuous mode [ 176.989613][ T59] usb 8-1: USB disconnect, device number 30 [ 176.993029][T10750] veth0_macvtap: entered promiscuous mode [ 176.996870][T10750] veth1_macvtap: entered promiscuous mode [ 177.006100][T10750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.015175][T10750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.021987][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.026617][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.030827][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.036545][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.072532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.075107][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.079516][ T5952] Bluetooth: hci4: command tx timeout [ 177.092871][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.095516][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.133371][ T53] usb 5-1: USB disconnect, device number 24 [ 177.136671][ T53] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 177.208516][ T6005] usb 6-1: USB disconnect, device number 31 [ 177.249815][T10967] syzkaller1: entered promiscuous mode [ 177.251681][T10967] syzkaller1: entered allmulticast mode [ 177.666691][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 177.666701][ T40] audit: type=1326 audit(1763452406.568:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.680727][ T40] audit: type=1326 audit(1763452406.568:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.690371][ T40] audit: type=1326 audit(1763452406.578:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.697389][ T40] audit: type=1326 audit(1763452406.578:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.707252][ T40] audit: type=1326 audit(1763452406.578:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.716662][ T40] audit: type=1326 audit(1763452406.578:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.726830][ T40] audit: type=1326 audit(1763452406.578:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.736334][ T40] audit: type=1326 audit(1763452406.578:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.745448][ T40] audit: type=1326 audit(1763452406.578:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.752499][ T40] audit: type=1326 audit(1763452406.578:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.1.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 177.757087][T10978] 9pnet_fd: Insufficient options for proto=fd [ 178.485400][T10993] netlink: 392 bytes leftover after parsing attributes in process `syz.3.2121'. [ 178.513589][T10995] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2122'. [ 178.807852][ T5946] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 178.877129][T11014] 9pnet_fd: Insufficient options for proto=fd [ 178.895163][T11016] syzkaller1: entered promiscuous mode [ 178.897187][T11016] syzkaller1: entered allmulticast mode [ 178.977025][ T5946] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.980905][ T5946] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.985297][ T5946] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.990956][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.158033][ T5952] Bluetooth: hci4: command tx timeout [ 179.207216][ T5946] usb 6-1: usb_control_msg returned -32 [ 179.209281][ T5946] usbtmc 6-1:16.0: can't read capabilities [ 179.614535][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 179.617576][T11029] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 179.620060][T11029] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 179.622587][T11029] bridge0: port 3(netdevsim0) entered disabled state [ 179.632042][T11029] bridge_slave_1: left allmulticast mode [ 179.634000][T11029] bridge_slave_1: left promiscuous mode [ 179.635943][T11029] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.647305][T11029] bridge_slave_0: left allmulticast mode [ 179.650770][T11029] bridge_slave_0: left promiscuous mode [ 179.653527][T11029] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.769964][ T6006] usb 6-1: USB disconnect, device number 32 [ 180.619395][ T29] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 180.767827][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 180.771141][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.773908][ T29] usb 6-1: config 0 has no interface number 0 [ 180.775953][ T29] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 180.779257][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.783082][ T29] usb 6-1: config 0 descriptor?? [ 180.787502][ T29] hso 6-1:0.1: Failed to find BULK IN ep [ 181.105068][T11049] 9pnet_fd: Insufficient options for proto=fd [ 181.196173][ T6006] usb 6-1: USB disconnect, device number 33 [ 182.037467][T11054] sch_fq: defrate 4294967295 ignored. [ 182.081376][T11058] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 182.083555][T11058] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 182.085747][T11058] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 182.088280][T11058] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 182.090466][T11058] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 182.092754][T11058] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 182.094881][T11058] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 182.097111][T11058] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 182.100103][T11058] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 182.102242][T11058] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 182.116143][T11060] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2148'. [ 182.618219][T11080] 9pnet_fd: Insufficient options for proto=fd [ 183.037795][ C3] sched: DL replenish lagged too much [ 183.317102][T11091] block nbd2: NBD_DISCONNECT [ 183.407444][T11097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2163'. [ 183.649771][T11051] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.653204][T11051] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.671204][T11051] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.673235][T11051] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.685058][T11051] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.688610][T11051] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.713782][T11051] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.715854][T11051] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 183.731707][T11051] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 184.027922][ T5946] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 184.030572][ T29] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 184.069981][T11111] 9pnet_fd: Insufficient options for proto=fd [ 184.207865][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 184.209749][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 184.217222][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.222363][ T5946] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 184.225515][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.228669][ T5946] usb 5-1: Product: syz [ 184.230177][ T5946] usb 5-1: Manufacturer: syz [ 184.231885][ T29] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 184.234844][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.237481][ T5946] usb 5-1: SerialNumber: syz [ 184.239096][ T29] usb 7-1: Product: syz [ 184.246512][ T29] usb 7-1: Manufacturer: syz [ 184.252694][ T29] usb 7-1: SerialNumber: syz [ 184.258480][ T29] usb 7-1: config 0 descriptor?? [ 184.263366][ T29] usb 7-1: selecting invalid altsetting 1 [ 184.265337][ T29] usb 7-1: Can not set alternate setting to 1, error: -22 [ 184.267691][ T29] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -22 [ 184.466628][ T29] usb 7-1: USB disconnect, device number 22 [ 184.677202][ T5946] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.809177][T11123] netlink: 'syz.3.2172': attribute type 4 has an invalid length. [ 184.811797][T11123] netlink: 'syz.3.2172': attribute type 5 has an invalid length. [ 184.814393][T11123] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2172'. [ 184.872844][ T5946] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 184.889284][T10867] udevd[10867]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.059791][ T6005] usb 5-1: USB disconnect, device number 25 [ 185.217894][ T5946] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 185.259458][T11136] 9pnet_fd: Insufficient options for proto=fd [ 185.385121][ T5946] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.388406][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.400715][ T5946] usb 8-1: config 0 descriptor?? [ 185.408847][ T5946] cp210x 8-1:0.0: cp210x converter detected [ 185.592772][T11138] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 185.596314][T11138] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 185.601002][T11138] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 185.604330][T11138] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 185.717968][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.718044][ T5947] Bluetooth: hci3: command 0x0405 tx timeout [ 185.720907][ T5300] Bluetooth: hci2: command 0x0406 tx timeout [ 185.722099][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 185.943250][T11170] futex_wake_op: syz.2.2192 tries to shift op by 32; fix this program [ 186.023906][ T5946] cp210x 8-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 186.026169][ T5946] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 186.040140][ T5946] usb 8-1: cp210x converter now attached to ttyUSB0 [ 186.047910][ T5946] usb 8-1: USB disconnect, device number 31 [ 186.051349][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.055244][ T5946] cp210x 8-1:0.0: device disconnected [ 186.913292][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 186.916498][T11229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 186.919272][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 187.074913][T11245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2227'. [ 187.249505][T11270] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 187.311060][T11276] ip6gretap0 speed is unknown, defaulting to 1000 [ 187.462416][T11285] 9pnet_fd: Insufficient options for proto=fd [ 187.622848][T11288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2244'. [ 187.797899][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 187.797958][ T5947] Bluetooth: hci2: command 0x0406 tx timeout [ 187.799955][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.800017][ T5300] Bluetooth: hci3: command 0x0405 tx timeout [ 188.062735][T11321] overlayfs: failed to resolve './file1': -2 [ 188.239853][T11336] option changes via remount are deprecated (pid=11335 comm=syz.3.2266) [ 188.280841][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 188.555749][T11354] 9pnet_fd: Insufficient options for proto=fd [ 188.867837][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 189.037796][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 189.041037][ T10] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 189.043835][ T10] usb 6-1: config 0 has no interface number 0 [ 189.047618][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 189.050899][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.054746][ T10] usb 6-1: Product: syz [ 189.056089][ T10] usb 6-1: Manufacturer: syz [ 189.057615][ T10] usb 6-1: SerialNumber: syz [ 189.061654][ T10] usb 6-1: config 0 descriptor?? [ 189.065303][ T10] asix 6-1:0.188: probe with driver asix failed with error -22 [ 189.265452][ T10] usb 6-1: USB disconnect, device number 34 [ 189.367372][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 189.747825][ T6005] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 189.795502][T11396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2291'. [ 189.799066][T11396] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2291'. [ 189.801961][T11396] netlink: 'syz.0.2291': attribute type 6 has an invalid length. [ 189.804524][T11396] netlink: 'syz.0.2291': attribute type 5 has an invalid length. [ 189.807017][T11396] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2291'. [ 189.878217][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.899234][ T6005] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.902623][ T6005] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.906550][ T6005] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.909819][ T6005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.912414][ T6005] usb 8-1: SerialNumber: syz [ 190.012364][T11413] QAT: failed to copy from user cfg_data. [ 190.123231][ T6005] usb 8-1: 0:2 : does not exist [ 190.132137][ T6005] usb 8-1: USB disconnect, device number 32 [ 190.147452][T10867] udevd[10867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.194653][T11426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.287836][ T5980] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 190.311932][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 190.315401][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'. [ 190.318983][T11434] netlink: 'syz.1.2310': attribute type 14 has an invalid length. [ 190.322002][T11434] netlink: 'syz.1.2310': attribute type 13 has an invalid length. [ 190.360436][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2312'. [ 190.459170][ T5980] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 190.462772][ T5980] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.465896][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.468793][ T5980] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 190.471814][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.476628][ T5980] usb 5-1: config 0 descriptor?? [ 190.867078][T11460] 9pnet_fd: Insufficient options for proto=fd [ 190.954860][ T5980] pantherlord 0003:0810:0002.000E: hidraw1: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.0-1/input0 [ 190.965114][ T5980] pantherlord 0003:0810:0002.000E: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 191.156674][ T5980] usb 5-1: USB disconnect, device number 26 [ 191.416554][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'. [ 191.575304][T11484] netlink: 'syz.2.2332': attribute type 4 has an invalid length. [ 191.607361][T11490] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.611181][ T40] kauditd_printk_skb: 539 callbacks suppressed [ 191.611197][ T40] audit: type=1326 audit(1763452420.518:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.2.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 191.622228][ T40] audit: type=1326 audit(1763452420.518:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.2.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 191.647293][ T40] audit: type=1326 audit(1763452420.548:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.2.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 191.659418][ T40] audit: type=1326 audit(1763452420.548:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.2.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 191.967871][ T5980] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 192.180187][ T5980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.184555][ T5980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.191663][ T5980] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.194886][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.197372][ T5980] usb 5-1: SerialNumber: syz [ 192.412351][ T5980] usb 5-1: 0:2 : does not exist [ 192.419978][ T5980] usb 5-1: USB disconnect, device number 27 [ 192.430837][T10867] udevd[10867]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.648211][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 192.682440][T11529] netlink: 392 bytes leftover after parsing attributes in process `syz.2.2351'. [ 192.844966][T11545] netlink: 'syz.2.2359': attribute type 1 has an invalid length. [ 193.242860][T11572] 9pnet_fd: Insufficient options for proto=fd [ 193.517073][ T40] audit: type=1326 audit(1763452422.418:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.0.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7fc00000 [ 193.612067][T11587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2378'. [ 193.722458][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.724821][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.207883][ T60] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 194.367846][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 194.370888][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.375550][ T60] usb 8-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 194.378782][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.381783][ T60] usb 8-1: Product: syz [ 194.383185][ T60] usb 8-1: Manufacturer: syz [ 194.384677][ T60] usb 8-1: SerialNumber: syz [ 194.387389][ T60] usb 8-1: config 0 descriptor?? [ 194.394769][ T60] usb 8-1: invalid MIDI EP [ 194.396308][ T60] usb 8-1: snd-bcd2000: error during probing [ 194.400769][ T60] snd-bcd2000 8-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 194.594108][ T60] usb 8-1: USB disconnect, device number 33 [ 194.699077][ T40] audit: type=1326 audit(1763452423.608:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.2408" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x0 [ 194.926566][T11664] netlink: 'syz.0.2414': attribute type 29 has an invalid length. [ 194.929990][T11664] netlink: 'syz.0.2414': attribute type 29 has an invalid length. [ 195.071996][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 195.192347][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 195.200454][T11698] 9pnet_fd: Insufficient options for proto=fd [ 195.283152][T11708] binder: 11707:11708 ioctl c0306201 0 returned -14 [ 195.285634][T11708] binder: 11707:11708 ioctl 8933 0 returned -22 [ 195.815837][T11720] 9pnet_fd: Insufficient options for proto=fd [ 196.614356][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.617593][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.621551][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.625212][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.631146][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.652086][T11735] ip6gretap0 speed is unknown, defaulting to 1000 [ 196.824405][T11735] chnl_net:caif_netlink_parms(): no params data found [ 196.924061][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.927025][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.931388][T11735] bridge_slave_0: entered allmulticast mode [ 196.934158][T11735] bridge_slave_0: entered promiscuous mode [ 196.937471][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.939917][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.942330][T11735] bridge_slave_1: entered allmulticast mode [ 196.945183][T11735] bridge_slave_1: entered promiscuous mode [ 196.995958][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.004051][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.056322][T11735] team0: Port device team_slave_0 added [ 197.059709][T11735] team0: Port device team_slave_1 added [ 197.104427][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.107253][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.117359][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.123077][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.125333][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.133737][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.194166][T11735] hsr_slave_0: entered promiscuous mode [ 197.197303][T11735] hsr_slave_1: entered promiscuous mode [ 197.200286][T11735] debugfs: 'hsr0' already exists in 'hsr' [ 197.202451][T11735] Cannot create hsr debugfs directory [ 197.384710][T11735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.580929][T11745] loop5: detected capacity change from 0 to 9975 [ 197.638416][T10867] Buffer I/O error on dev loop5, logical block 1246, async page read [ 197.918262][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2452'. [ 197.921542][ T60] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 198.001028][T11761] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 198.071102][ T60] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.074064][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.076554][ T60] usb 6-1: Product: syz [ 198.079081][ T60] usb 6-1: Manufacturer: syz [ 198.080546][ T60] usb 6-1: SerialNumber: syz [ 198.083145][ T60] usb 6-1: config 0 descriptor?? [ 198.296893][T11744] loop5: detected capacity change from 9975 to 0 [ 198.300274][ T60] usb 6-1: Firmware version (0.0) predates our first public release. [ 198.303907][ T60] usb 6-1: Please update to version 0.2 or newer [ 198.339936][ T60] usb 6-1: USB disconnect, device number 35 [ 198.598896][T11735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.677889][ T5947] Bluetooth: hci0: command tx timeout [ 198.762243][T11791] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 199.255939][T11807] netlink: 'syz.3.2475': attribute type 21 has an invalid length. [ 199.259525][T11807] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2475'. [ 199.733066][T11735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.431384][T11735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.503570][ T1142] bridge_slave_1: left allmulticast mode [ 200.506118][ T1142] bridge_slave_1: left promiscuous mode [ 200.509612][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.515200][ T1142] bridge_slave_0: left allmulticast mode [ 200.516997][ T1142] bridge_slave_0: left promiscuous mode [ 200.519799][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.527888][ T60] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 200.690266][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 200.704920][ T60] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 200.708004][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.718108][ T60] usb 6-1: config 0 descriptor?? [ 200.730592][ T60] gspca_main: sunplus-2.14.0 probing 041e:400b [ 200.750748][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.756389][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.761405][ T1142] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 200.765224][ T1142] bond0 (unregistering): Released all slaves [ 200.767827][ T5947] Bluetooth: hci0: command tx timeout [ 200.813635][T11735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.823710][T11735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.831631][T11735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.846796][T11735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.917321][T11735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.927266][T11735] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.933430][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.935744][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.942665][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.944931][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.091934][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.102827][ T1142] hsr_slave_0: left promiscuous mode [ 201.105024][ T1142] hsr_slave_1: left promiscuous mode [ 201.107134][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.110526][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.115136][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.117485][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.141437][ T1142] veth1_macvtap: left promiscuous mode [ 201.144102][ T1142] veth0_macvtap: left promiscuous mode [ 201.145975][ T1142] veth1_vlan: left promiscuous mode [ 201.147725][ T1142] veth0_vlan: left promiscuous mode [ 201.540305][ T60] gspca_sunplus: reg_r err -71 [ 201.542358][ T60] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 201.548266][ T60] usb 6-1: USB disconnect, device number 36 [ 201.771821][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 201.836860][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 202.343212][T11735] veth0_vlan: entered promiscuous mode [ 202.352595][T11735] veth1_vlan: entered promiscuous mode [ 202.391315][T11735] veth0_macvtap: entered promiscuous mode [ 202.396002][T11735] veth1_macvtap: entered promiscuous mode [ 202.410853][T11735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.415283][T11735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.425396][ T75] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.430507][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.438752][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.442569][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.474997][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.477812][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.492175][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.494687][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.632441][ T1142] IPVS: stop unused estimator thread 0... [ 202.847905][ T5947] Bluetooth: hci0: command tx timeout [ 203.913506][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.917012][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.921027][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.924602][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.928554][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.948175][T11913] ip6gretap0 speed is unknown, defaulting to 1000 [ 204.068923][ T5980] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 204.215596][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.219757][ T5980] usb 5-1: Using ep0 maxpacket: 16 [ 204.227073][ T5980] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 204.231879][ T5980] usb 5-1: config 0 has no interface number 0 [ 204.235716][ T5980] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.240373][ T5980] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 204.245481][ T5980] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 204.250521][T11913] chnl_net:caif_netlink_parms(): no params data found [ 204.254444][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 204.256982][ T5980] usb 5-1: Product: syz [ 204.261311][ T5980] usb 5-1: SerialNumber: syz [ 204.265026][ T5980] usb 5-1: config 0 descriptor?? [ 204.275751][ T5980] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 204.278979][ T5980] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input12 [ 204.395680][T11913] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.398622][T11913] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.400955][T11913] bridge_slave_0: entered allmulticast mode [ 204.404004][T11913] bridge_slave_0: entered promiscuous mode [ 204.421960][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.430349][T11913] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.432728][T11913] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.435182][T11913] bridge_slave_1: entered allmulticast mode [ 204.440250][T11913] bridge_slave_1: entered promiscuous mode [ 204.471561][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 204.472920][T11913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.488997][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.496493][T11913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.536339][T11913] team0: Port device team_slave_0 added [ 204.540323][T11913] team0: Port device team_slave_1 added [ 204.571213][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.599299][T11913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.602625][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.614405][T11913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.620968][T11913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.623922][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.634790][T11913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.671922][ T59] usb 5-1: USB disconnect, device number 28 [ 204.679145][ T59] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 204.696038][T11913] hsr_slave_0: entered promiscuous mode [ 204.698661][T11913] hsr_slave_1: entered promiscuous mode [ 204.701179][T11913] debugfs: 'hsr0' already exists in 'hsr' [ 204.703127][T11913] Cannot create hsr debugfs directory [ 204.928479][ T5947] Bluetooth: hci0: command tx timeout [ 205.053135][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.059552][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.064564][ T75] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 205.068320][ T75] bond0 (unregistering): Released all slaves [ 205.075058][ T75] bond1 (unregistering): (slave bond2): Releasing backup interface [ 205.080336][ T75] bond1 (unregistering): Released all slaves [ 205.177261][ T75] bond2 (unregistering): Released all slaves [ 205.188077][ T75] bond3 (unregistering): Released all slaves [ 205.227901][ T6608] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 205.310852][ T75] tipc: Left network mode [ 205.377857][ T6608] usb 6-1: Using ep0 maxpacket: 32 [ 205.383956][ T6608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.387573][ T6608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.392877][ T6608] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.395815][ T6608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.400132][ T6608] usb 6-1: config 0 descriptor?? [ 205.404790][ T6608] hub 6-1:0.0: USB hub found [ 205.539744][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2531'. [ 205.605213][ T6608] hub 6-1:0.0: 1 port detected [ 205.676130][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'. [ 205.692097][ T75] macvlan0: left promiscuous mode [ 205.695710][ T75] batadv0: left promiscuous mode [ 205.702446][ T75] hsr_slave_0: left promiscuous mode [ 205.704844][ T75] hsr_slave_1: left promiscuous mode [ 205.706985][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.709420][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.712442][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.714816][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.756972][ T75] veth1_macvtap: left promiscuous mode [ 205.759485][ T75] veth0_macvtap: left promiscuous mode [ 205.761754][ T75] veth1_vlan: left allmulticast mode [ 205.764036][ T75] veth1_vlan: left promiscuous mode [ 205.806518][ T6608] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 205.809254][ T6608] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 205.814587][ T6608] usbhid 6-1:0.0: can't add hid device: -71 [ 205.816639][ T6608] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 205.838089][ T6608] usb 6-1: USB disconnect, device number 37 [ 205.957958][ T5947] Bluetooth: hci1: command tx timeout [ 206.300162][T12009] loop5: detected capacity change from 0 to 7 [ 206.422400][T10867] Dev loop5: unable to read RDB block 7 [ 206.424323][T10867] loop5: unable to read partition table [ 206.426413][T10867] loop5: partition table beyond EOD, truncated [ 206.502905][ T75] team0 (unregistering): Port device team_slave_1 removed [ 206.555264][T12009] Dev loop5: unable to read RDB block 7 [ 206.557890][T12009] loop5: unable to read partition table [ 206.561020][T12009] loop5: partition table beyond EOD, truncated [ 206.563782][T12009] loop_reread_partitions: partition scan of loop5 (úů) failed (rc=-5) [ 206.597883][ T75] team0 (unregistering): Port device team_slave_0 removed [ 207.223912][T11913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.232008][T11913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.242407][T11913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.262559][T11913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.307528][T11913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.334945][T11913] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.342945][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.345930][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.355282][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.357645][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.474165][T11913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.495352][T11913] veth0_vlan: entered promiscuous mode [ 207.500840][T11913] veth1_vlan: entered promiscuous mode [ 207.515190][T11913] veth0_macvtap: entered promiscuous mode [ 207.519759][T11913] veth1_macvtap: entered promiscuous mode [ 207.534505][T11913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.544891][T11913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.550836][ T75] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.554603][ T75] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.560848][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.564560][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.609303][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.611931][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.653350][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.656105][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.940737][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 208.038475][ T5947] Bluetooth: hci1: command tx timeout [ 208.098347][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'. [ 208.229520][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2578'. [ 208.369328][ T5946] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 208.514102][T12149] vlan2: entered allmulticast mode [ 208.516648][T12149] bridge0: port 3(vlan2) entered blocking state [ 208.520086][T12149] bridge0: port 3(vlan2) entered disabled state [ 208.524314][T12149] vlan2: entered promiscuous mode [ 208.607904][ T5946] usb 8-1: Using ep0 maxpacket: 8 [ 208.617145][ T5946] usb 8-1: unable to get BOS descriptor or descriptor too short [ 208.620502][ T5946] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 208.622993][ T5946] usb 8-1: can't read configurations, error -71 [ 209.030296][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'. [ 209.153018][T12195] overlayfs: failed to resolve './file0': -2 [ 209.193284][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 209.697895][ T6023] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 209.849091][ T6023] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 209.852346][ T6023] usb 6-1: config 0 has no interface number 0 [ 209.854705][ T6023] usb 6-1: config 0 interface 251 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 209.858300][ T6023] usb 6-1: config 0 interface 251 has no altsetting 0 [ 209.862039][ T6023] usb 6-1: New USB device found, idVendor=1b3d, idProduct=4701, bcdDevice=53.f1 [ 209.864921][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.867443][ T6023] usb 6-1: Product: syz [ 209.868897][ T6023] usb 6-1: Manufacturer: syz [ 209.870376][ T6023] usb 6-1: SerialNumber: syz [ 209.873168][ T6023] usb 6-1: config 0 descriptor?? [ 210.082385][ T6023] ftdi_sio 6-1:0.251: FTDI USB Serial Device converter detected [ 210.085391][ T6023] ftdi_sio ttyUSB0: unknown device type: 0x53f1 [ 210.091109][ T6023] usb 6-1: USB disconnect, device number 38 [ 210.094444][ T6023] ftdi_sio 6-1:0.251: device disconnected [ 210.100894][T12225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2625'. [ 210.128268][ T5947] Bluetooth: hci1: command tx timeout [ 210.165564][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'. [ 210.168719][T12232] bridge_slave_1: left allmulticast mode [ 210.170910][T12232] bridge_slave_1: left promiscuous mode [ 210.172925][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.176650][T12232] bridge_slave_0: left allmulticast mode [ 210.181977][T12232] bridge_slave_0: left promiscuous mode [ 210.184381][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.506239][T12249] fuse: Bad value for 'fd' [ 210.667911][ T6005] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 210.682556][T12261] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 210.771160][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2643'. [ 210.827939][ T6005] usb 8-1: Using ep0 maxpacket: 32 [ 210.830849][ T6005] usb 8-1: config 8 has an invalid interface number: 22 but max is 0 [ 210.833645][ T6005] usb 8-1: config 8 has no interface number 0 [ 210.835708][ T6005] usb 8-1: config 8 interface 22 altsetting 195 endpoint 0x8 has invalid wMaxPacketSize 0 [ 210.839090][ T6005] usb 8-1: config 8 interface 22 altsetting 195 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 210.842524][ T6005] usb 8-1: config 8 interface 22 has no altsetting 0 [ 210.848715][ T6005] usb 8-1: New USB device found, idVendor=0403, idProduct=f06e, bcdDevice= 8.7c [ 210.852003][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.854847][ T6005] usb 8-1: Product: syz [ 210.856165][ T6005] usb 8-1: Manufacturer: syz [ 210.857653][ T6005] usb 8-1: SerialNumber: syz [ 211.071530][ T6005] ftdi_sio 8-1:8.22: FTDI USB Serial Device converter detected [ 211.074474][ T6005] ftdi_sio ttyUSB0: unknown device type: 0x87c [ 211.080492][ T6005] usb 8-1: USB disconnect, device number 36 [ 211.084697][ T6005] ftdi_sio 8-1:8.22: device disconnected [ 211.263277][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.270472][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.274015][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.276865][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.280097][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.316815][T12304] ip6gretap0 speed is unknown, defaulting to 1000 [ 211.467836][T12304] chnl_net:caif_netlink_parms(): no params data found [ 211.553125][ T1141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.562056][T12304] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.564497][T12304] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.566896][T12304] bridge_slave_0: entered allmulticast mode [ 211.569852][T12304] bridge_slave_0: entered promiscuous mode [ 211.573648][T12304] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.576088][T12304] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.578940][T12304] bridge_slave_1: entered allmulticast mode [ 211.581749][T12304] bridge_slave_1: entered promiscuous mode [ 211.631057][T12304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.646608][ T1141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.655085][T12304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.696707][T12304] team0: Port device team_slave_0 added [ 211.703331][T12304] team0: Port device team_slave_1 added [ 211.760457][ T1141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.767500][T12304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.771436][T12304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.780792][T12304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.785397][T12304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.787952][T12304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.797013][T12304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.838384][T12304] hsr_slave_0: entered promiscuous mode [ 211.840814][T12304] hsr_slave_1: entered promiscuous mode [ 211.843087][T12304] debugfs: 'hsr0' already exists in 'hsr' [ 211.845335][T12304] Cannot create hsr debugfs directory [ 211.873680][ T1141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.973322][T12331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2669'. [ 211.976450][T12331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2669'. [ 211.994713][T12331] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 211.999424][T12331] gretap1: entered promiscuous mode [ 212.001772][T12331] gretap1: entered allmulticast mode [ 212.055111][ T1141] bridge_slave_1: left allmulticast mode [ 212.057587][ T1141] bridge_slave_1: left promiscuous mode [ 212.060433][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.066680][ T1141] bridge_slave_0: left allmulticast mode [ 212.069673][ T1141] bridge_slave_0: left promiscuous mode [ 212.072216][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.199823][ T5945] Bluetooth: hci1: command tx timeout [ 212.236230][T12347] 9pnet_fd: Insufficient options for proto=fd [ 212.243763][T12348] 9pnet_fd: Insufficient options for proto=fd [ 212.476737][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.481838][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.487695][ T1141] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 212.491197][ T1141] bond0 (unregistering): Released all slaves [ 212.946664][ T1141] hsr_slave_0: left promiscuous mode [ 212.963463][ T1141] hsr_slave_1: left promiscuous mode [ 212.965661][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.976321][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.987299][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.992416][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.032778][ T1141] veth1_macvtap: left promiscuous mode [ 213.038714][ T1141] veth0_macvtap: left promiscuous mode [ 213.040661][ T1141] veth1_vlan: left promiscuous mode [ 213.042487][ T1141] veth0_vlan: left promiscuous mode [ 213.089719][ T6005] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 213.255266][ T6005] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.260062][ T6005] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 213.263619][ T6005] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.269745][ T6005] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 213.272668][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.275241][ T6005] usb 8-1: Product: syz [ 213.276599][ T6005] usb 8-1: Manufacturer: syz [ 213.279436][ T6005] usb 8-1: SerialNumber: syz [ 213.285893][ T6005] usb 8-1: config 0 descriptor?? [ 213.328048][ T5945] Bluetooth: hci2: command tx timeout [ 213.696734][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 213.782330][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 214.244031][ T6005] usb 8-1: USB disconnect, device number 37 [ 214.276388][T12304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.281233][T12304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.285974][T12304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.294236][T12304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.353411][T12304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.366234][T12304] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.378919][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.381196][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.394131][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.396505][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.523683][T12304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.545023][T12304] veth0_vlan: entered promiscuous mode [ 214.553602][T12304] veth1_vlan: entered promiscuous mode [ 214.567663][T12304] veth0_macvtap: entered promiscuous mode [ 214.572429][T12304] veth1_macvtap: entered promiscuous mode [ 214.581192][T12304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.585391][T12304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.594858][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.597705][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.601325][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.605380][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.644314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.651282][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.666712][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.670235][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.718421][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2660'. [ 214.937150][T12470] 9pnet_fd: Insufficient options for proto=fd [ 214.978300][ T40] audit: type=1326 audit(1763452443.888:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 214.998351][ T40] audit: type=1326 audit(1763452443.888:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.054936][ T40] audit: type=1326 audit(1763452443.888:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.071628][ T40] audit: type=1326 audit(1763452443.888:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.079927][ T40] audit: type=1326 audit(1763452443.898:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.086590][ T40] audit: type=1326 audit(1763452443.898:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.094904][ T40] audit: type=1326 audit(1763452443.898:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.101995][ T40] audit: type=1326 audit(1763452443.898:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.109584][ T40] audit: type=1326 audit(1763452443.898:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.1.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 215.317990][ T6608] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 215.397930][ T5945] Bluetooth: hci2: command tx timeout [ 215.490336][ T6608] usb 6-1: Using ep0 maxpacket: 16 [ 215.493385][ T6608] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.496621][ T6608] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 215.499889][ T6608] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.503961][ T6608] usb 6-1: config 1 interface 0 has no altsetting 0 [ 215.508005][ T6608] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.510863][ T6608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.513348][ T6608] usb 6-1: Product: syz [ 215.514682][ T6608] usb 6-1: Manufacturer: syz [ 215.516287][ T6608] usb 6-1: SerialNumber: syz [ 215.533640][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 215.557793][ T6235] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 215.724217][ T6608] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 215.728717][ T6235] usb 8-1: Using ep0 maxpacket: 32 [ 215.732608][ T6235] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.734789][ T6235] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 215.737624][ T6235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.748230][ T6235] usb 8-1: config 0 descriptor?? [ 215.925913][ T6005] usb 6-1: USB disconnect, device number 39 [ 215.967910][ T6235] usbhid 8-1:0.0: can't add hid device: -71 [ 215.970535][ T6235] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 215.979424][ T6235] usb 8-1: USB disconnect, device number 38 [ 216.254119][T12539] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2752'. [ 216.552291][T12557] netlink: 'syz.3.2761': attribute type 13 has an invalid length. [ 216.669887][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 216.678622][ T40] audit: type=1326 audit(1763452445.578:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.2765" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f61579 code=0x0 [ 216.722080][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2766'. [ 216.725058][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'. [ 216.728183][T12568] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2766'. [ 216.731291][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2766'. [ 217.027890][ T6023] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 217.177801][ T6023] usb 8-1: Using ep0 maxpacket: 8 [ 217.180760][ T6023] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.184174][ T6023] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.189942][ T6023] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 217.193031][ T6023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.195877][ T6023] usb 8-1: Product: syz [ 217.197358][ T6023] usb 8-1: Manufacturer: syz [ 217.199075][ T6023] usb 8-1: SerialNumber: syz [ 217.205294][ T6023] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input13 [ 217.407066][ T5334] bcm5974 8-1:1.0: could not read from device [ 217.412759][ T5334] bcm5974 8-1:1.0: could not read from device [ 217.415851][ T6023] usb 8-1: USB disconnect, device number 39 [ 217.487847][ T5945] Bluetooth: hci2: command tx timeout [ 217.758391][T12597] 9pnet_fd: Insufficient options for proto=fd [ 218.004894][T12605] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.2782'. [ 218.184214][T12627] syz.3.2793 (12627) used greatest stack depth: 17224 bytes left [ 218.683735][T12676] fuse: Unknown parameter 'r' [ 218.782983][T12683] overlayfs: failed to resolve './file0': -2 [ 219.022732][T12688] 9pnet_fd: Insufficient options for proto=fd [ 219.193537][T12692] syz_tun: entered allmulticast mode [ 219.195630][T12691] syz_tun: left allmulticast mode [ 219.558030][ T5945] Bluetooth: hci2: command tx timeout [ 219.561086][T12734] netlink: 806 bytes leftover after parsing attributes in process `syz.0.2840'. [ 219.618097][T12739] bond0: entered promiscuous mode [ 219.619809][T12739] bond_slave_0: entered promiscuous mode [ 219.621853][T12739] bond_slave_1: entered promiscuous mode [ 219.624570][T12739] batadv0: entered promiscuous mode [ 219.626974][T12739] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 219.633482][T12739] bond0: left promiscuous mode [ 219.635118][T12739] bond_slave_0: left promiscuous mode [ 219.636977][T12739] bond_slave_1: left promiscuous mode [ 219.640483][T12739] batadv0: left promiscuous mode [ 219.840337][T12765] binder: 12764:12765 ioctl c0306201 0 returned -14 [ 220.101061][T12790] 9pnet_fd: Insufficient options for proto=fd [ 220.307908][ T6608] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 220.459641][ T6608] usb 8-1: config 0 interface 0 has no altsetting 0 [ 220.462652][ T6608] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 220.466593][ T6608] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.468111][T12803] netlink: 'syz.2.2868': attribute type 3 has an invalid length. [ 220.472855][ T6608] usb 8-1: config 0 descriptor?? [ 220.488002][T12805] program syz.0.2869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.047862][ T6235] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 221.083080][ T6608] video4linux radio48: keene_cmd_set failed (-71) [ 221.087232][ T6608] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 221.090884][ T6608] usb 8-1: USB disconnect, device number 40 [ 221.199250][ T6235] usb 6-1: config 0 has an invalid interface number: 42 but max is 0 [ 221.201951][ T6235] usb 6-1: config 0 has no interface number 0 [ 221.204075][ T6235] usb 6-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.ae [ 221.207120][ T6235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.211361][ T6235] usb 6-1: config 0 descriptor?? [ 221.214505][ T6235] usb-storage 6-1:0.42: USB Mass Storage device detected [ 221.219420][ T6235] usb-storage 6-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 221.221965][ T6235] usb-storage 6-1:0.42: This device (04cb,0100,00ae S 04 P e0) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 221.221965][ T6235] Please send a copy of this message to and [ 221.421996][T11044] usb 6-1: USB disconnect, device number 40 [ 221.536082][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 221.575710][T12847] trusted_key: syz.0.2887 sent an empty control message without MSG_MORE. [ 221.847564][T12869] 9pnet_fd: Insufficient options for proto=fd [ 222.278907][ T1333] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 222.427818][ T1333] usb 5-1: Using ep0 maxpacket: 8 [ 222.432863][ T1333] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.435910][ T1333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.438665][ T1333] usb 5-1: Product: syz [ 222.440118][ T1333] usb 5-1: Manufacturer: syz [ 222.441704][ T1333] usb 5-1: SerialNumber: syz [ 222.652133][ T1333] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.815557][T12915] bond0: Caught tx_queue_len zero misconfig [ 222.852092][ T6235] usb 5-1: USB disconnect, device number 29 [ 222.936687][T12920] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2920'. [ 223.048901][T12928] 9pnet_fd: Insufficient options for proto=fd [ 223.056441][T12893] usblp0: removed [ 223.825823][ T40] audit: type=1326 audit(1763452452.728:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.3.2922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7fc00000 [ 223.909215][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 223.911678][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 224.017918][T12957] ceph: No mds server is up or the cluster is laggy [ 224.031342][T12975] netlink: 'syz.2.2943': attribute type 4 has an invalid length. [ 224.146426][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2945'. [ 224.159288][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2945'. [ 224.223915][T12985] 9pnet_fd: Insufficient options for proto=fd [ 224.848087][T13045] sch_tbf: burst 3 is lower than device bond0 mtu (1514) ! [ 225.101503][T13081] veth1_to_bond: entered allmulticast mode [ 225.105876][T13080] veth1_to_bond: left allmulticast mode [ 225.199666][T13092] loop8: detected capacity change from 0 to 7 [ 225.204849][T13092] Dev loop8: unable to read RDB block 7 [ 225.206937][T13092] loop8: unable to read partition table [ 225.210284][T13092] loop8: partition table beyond EOD, truncated [ 225.212363][T13092] loop_reread_partitions: partition scan of loop8 (ţ被xü^>Ńŕ– ) failed (rc=-5) [ 225.388131][ T6023] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 225.561129][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.566091][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.567834][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 225.570569][ T6023] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 225.575259][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 225.577758][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.589142][ T6023] usb 5-1: config 0 descriptor?? [ 225.621378][T13123] lo: Caught tx_queue_len zero misconfig [ 225.999771][ T6023] cm6533_jd 0003:0D8C:0022.000F: unbalanced collection at end of report description [ 226.006331][ T6023] cm6533_jd 0003:0D8C:0022.000F: parse failed [ 226.008416][ T6023] cm6533_jd 0003:0D8C:0022.000F: probe with driver cm6533_jd failed with error -22 [ 226.034116][ T10] IPVS: starting estimator thread 0... [ 226.138026][T13158] IPVS: using max 44 ests per chain, 105600 per kthread [ 226.198434][ T10] usb 5-1: USB disconnect, device number 30 [ 226.304568][T13178] 9pnet_fd: Insufficient options for proto=fd [ 226.446550][ T10] IPVS: starting estimator thread 0... [ 226.450551][T13187] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 226.547882][T13188] IPVS: using max 44 ests per chain, 105600 per kthread [ 226.734195][T13206] overlayfs: failed to resolve './file0': -2 [ 226.782960][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3051'. [ 226.930045][T13224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'. [ 227.527849][ T1333] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 227.679222][ T1333] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 227.683752][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.687597][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.692185][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.695984][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.699693][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.703771][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.707302][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.711183][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.715552][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.719955][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.723783][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.729249][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.733184][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.737008][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.742579][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.746657][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.750586][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.754809][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.758063][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.760965][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.764485][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.767390][ T1333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.770405][ T1333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.774403][ T1333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.779470][ T1333] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 227.783371][ T1333] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 227.786937][ T1333] usb 6-1: Product: syz [ 227.789171][ T1333] usb 6-1: Manufacturer: syz [ 227.791277][ T1333] usb 6-1: SerialNumber: syz [ 227.795434][ T1333] usb 6-1: config 0 descriptor?? [ 227.802021][ T1333] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 227.857867][ T6608] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 227.877921][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 228.008123][ T6023] usb 6-1: USB disconnect, device number 41 [ 228.011098][ T6023] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 228.012842][ T6608] usb 8-1: unable to get BOS descriptor or descriptor too short [ 228.017004][ T6608] usb 8-1: not running at top speed; connect to a high speed hub [ 228.021569][ T6608] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.025731][ T6608] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.028829][ T6608] usb 8-1: config 1 has no interface number 1 [ 228.031009][ T6608] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 228.035336][ T6608] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 228.037872][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 228.041869][ T6608] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.043585][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 228.045080][ T6608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.050483][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.053122][ T6608] usb 8-1: Product: syz [ 228.056470][ T10] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 228.058738][ T6608] usb 8-1: Manufacturer: syz [ 228.061380][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.063436][ T6608] usb 8-1: SerialNumber: syz [ 228.068288][ T10] usb 5-1: config 0 descriptor?? [ 228.279642][ T6608] hub 8-1:1.0: Invalid hub with more than one config or interface [ 228.282812][ T6608] hub 8-1:1.0: probe with driver hub failed with error -22 [ 228.290935][ T6608] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 228.310451][ T6608] usb 8-1: USB disconnect, device number 41 [ 228.333041][ T8863] udevd[8863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.481119][ T10] pantherlord 0003:0E8F:0003.0010: hidraw1: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.0-1/input0 [ 228.484902][ T10] pantherlord 0003:0E8F:0003.0010: no output reports found [ 228.679593][ T10] usb 5-1: USB disconnect, device number 31 [ 229.032995][ T40] audit: type=1326 audit(1763452457.938:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 229.042688][ T40] audit: type=1326 audit(1763452457.938:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 229.049771][ T40] audit: type=1326 audit(1763452457.938:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 229.056691][ T40] audit: type=1326 audit(1763452457.938:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.3.3098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 229.119475][T13321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3100'. [ 229.400467][T13344] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 229.405582][T13344] Error validating options; rc = [-22] [ 229.429911][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 229.433668][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 230.040916][T13392] 9pnet_fd: Insufficient options for proto=fd [ 230.122716][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3132'. [ 230.906600][T13431] overlayfs: missing 'lowerdir' [ 231.031090][T13437] ip6tnl0: Caught tx_queue_len zero misconfig [ 231.033108][T13437] sch_fq: defrate 4294967295 ignored. [ 231.310834][T13459] 9pnet_fd: Insufficient options for proto=fd [ 231.862802][T13482] netlink: 'syz.1.3170': attribute type 3 has an invalid length. [ 231.865627][T13482] netlink: 'syz.1.3170': attribute type 3 has an invalid length. [ 231.911598][T13484] bond1 (unregistering): Released all slaves [ 232.355040][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 232.370187][T13473] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.373118][T13473] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.375792][T13473] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.387834][T13473] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.397909][T13473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.402872][T13473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.407962][T13473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.412945][T13473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.416013][T13473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 232.421517][T13473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 232.668919][ T6235] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 232.820176][ T6235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.824678][ T6235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.830860][ T6235] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 232.833756][ T6235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.837997][ T6235] usb 5-1: config 0 descriptor?? [ 232.953385][T13553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.955931][T13553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.960462][T13553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.962983][T13553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.221060][T13575] ip6gretap0 speed is unknown, defaulting to 1000 [ 233.444315][ T6235] usb 5-1: USB disconnect, device number 32 [ 233.637876][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.660995][T13587] 9pnet_fd: Insufficient options for proto=fd [ 234.360867][T13636] bond1: invalid ARP target 0.0.0.0 specified for addition [ 234.363482][T13636] bond1: option arp_ip_target: invalid value (0) [ 234.368604][T13636] bond1 (unregistering): Released all slaves [ 234.437984][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.438097][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.440619][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.695041][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 235.013771][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3248'. [ 235.113137][T13661] team0 (unregistering): Port device team_slave_0 removed [ 235.123873][T13661] team0 (unregistering): Port device team_slave_1 removed [ 235.145428][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 235.260167][T13699] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 235.262633][T13699] netlink: 'syz.3.3265': attribute type 2 has an invalid length. [ 235.296568][T13702] binder: 13701:13702 ioctl c0306201 0 returned -14 [ 235.815415][T13801] udevd[13801]: failed to send result of seq 22293 to main daemon: Connection refused [ 235.816311][T13519] udevd[13519]: failed to send result of seq 22291 to main daemon: Transport endpoint is not connected [ 235.997383][T13808] tipc: Started in network mode [ 235.999299][T13808] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 236.001841][T13808] tipc: Enabled bearer , priority 0 [ 236.050849][ T6608] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 236.184912][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3293'. [ 236.208029][ T6608] usb 5-1: Using ep0 maxpacket: 32 [ 236.214505][ T6608] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 236.217344][ T6608] usb 5-1: config 0 has no interface number 0 [ 236.219744][ T6608] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 236.223601][ T6608] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 236.229048][ T6608] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 236.232173][ T6608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.235160][ T6608] usb 5-1: Product: syz [ 236.236989][ T6608] usb 5-1: Manufacturer: syz [ 236.238830][ T6608] usb 5-1: SerialNumber: syz [ 236.242141][ T6608] usb 5-1: config 0 descriptor?? [ 236.415878][T13833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3300'. [ 236.420214][T13833] netlink: 'syz.2.3300': attribute type 6 has an invalid length. [ 236.423802][T13833] netlink: 'syz.2.3300': attribute type 5 has an invalid length. [ 236.425096][T13834] 9pnet_fd: Insufficient options for proto=fd [ 236.427281][T13833] netlink: 'syz.2.3300': attribute type 4 has an invalid length. [ 236.452688][ T6608] radio-si470x 5-1:0.35: this is not a si470x device. [ 236.473300][ T40] audit: type=1326 audit(1763452465.378:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13837 comm="syz.2.3302" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x0 [ 236.479673][ T6608] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 236.517939][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.520620][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.523201][ T5300] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.558335][T13844] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3305'. [ 236.681460][ T6608] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 236.881978][ T5946] usb 5-1: USB disconnect, device number 33 [ 236.884591][ T5946] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 237.009576][ T6023] tipc: Node number set to 11578026 [ 237.607312][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3326'. [ 237.657308][T13895] 9pnet_fd: Insufficient options for proto=fd [ 237.758148][ T6005] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 237.860307][ T6023] IPVS: starting estimator thread 0... [ 237.917941][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 237.928001][ T6005] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.930018][ T6005] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 237.932907][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.937068][ T6005] usb 5-1: config 0 descriptor?? [ 237.947867][T13911] IPVS: using max 43 ests per chain, 103200 per kthread [ 238.146014][T13882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.151107][T13882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.362916][ T6005] hid (null): unknown global tag 0xd [ 238.365356][ T6005] hid (null): unknown global tag 0xc [ 238.367400][ T6005] hid (null): unknown global tag 0xe [ 238.369569][ T6005] hid (null): unknown global tag 0xc [ 238.391751][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 238.557690][ T6005] usb 5-1: USB disconnect, device number 34 [ 238.567912][ T5929] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 238.597939][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.597959][ T5300] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.598001][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.730040][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.733823][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.737023][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.741466][ T5929] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.744625][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.748688][ T5929] usb 8-1: config 0 descriptor?? [ 238.942013][T13957] 9pnet_fd: Insufficient options for proto=fd [ 238.983458][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3354'. [ 239.166874][ T5929] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 239.602088][T14003] ip6gretap0 speed is unknown, defaulting to 1000 [ 240.547891][T14036] fuse: Bad value for 'fd' [ 240.719034][T14046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3391'. [ 240.974175][T14062] tipc: Started in network mode [ 240.976524][T14062] tipc: Node identity 1, cluster identity 4711 [ 240.979376][T14062] tipc: Node number set to 1 [ 241.365123][T14083] ip6gretap0 speed is unknown, defaulting to 1000 [ 241.557896][ T6608] usb 8-1: reset high-speed USB device number 42 using dummy_hcd [ 241.562698][ T6608] usb 8-1: device reset changed ep0 maxpacket size! [ 241.569642][ T5929] usb 8-1: USB disconnect, device number 42 [ 241.697931][ T5929] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 241.847842][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 241.850474][ T5929] usb 8-1: unable to get BOS descriptor or descriptor too short [ 241.853917][ T5929] usb 8-1: config 0 has no interfaces? [ 241.857384][ T5929] usb 8-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 241.860686][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.863417][ T5929] usb 8-1: Product: syz [ 241.864763][ T5929] usb 8-1: Manufacturer: syz [ 241.866297][ T5929] usb 8-1: SerialNumber: syz [ 241.870421][ T5929] r8152-cfgselector 8-1: Unknown version 0x0000 [ 241.872842][ T5929] r8152-cfgselector 8-1: config 0 descriptor?? [ 242.087484][ T6608] r8152-cfgselector 8-1: USB disconnect, device number 43 [ 242.161764][T14125] netlink: 'syz.1.3426': attribute type 2 has an invalid length. [ 242.164803][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3426'. [ 242.668492][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3445'. [ 242.768814][T14175] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3451'. [ 242.828086][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 242.833374][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 242.838219][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 243.597860][ T60] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 243.757833][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 243.760933][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 243.762518][ T60] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 243.767123][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.771273][ T60] usb 5-1: Product: syz [ 243.772639][ T60] usb 5-1: Manufacturer: syz [ 243.774168][ T60] usb 5-1: SerialNumber: syz [ 243.776748][ T60] usb 5-1: config 0 descriptor?? [ 243.780992][ T60] gspca_main: se401-2.14.0 probing 047d:5003 [ 243.806123][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.890417][T14221] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 243.896097][T14221] bond1 (unregistering): Released all slaves [ 244.185468][ T60] gspca_se401: Wrong descriptor type [ 244.388975][ T5946] usb 5-1: USB disconnect, device number 35 [ 244.658598][T14240] bridge0: port 3(netdevsim0) entered blocking state [ 244.660944][T14240] bridge0: port 3(netdevsim0) entered disabled state [ 244.663310][T14240] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 244.669615][T14240] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 244.673958][T14240] bridge0: port 3(netdevsim0) entered blocking state [ 244.676276][T14240] bridge0: port 3(netdevsim0) entered forwarding state [ 245.777977][ T6005] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 245.939210][ T6005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.943784][ T6005] usb 5-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 245.946761][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 245.949821][ T6005] usb 5-1: Product: syz [ 245.952375][ T6005] usb 5-1: config 0 descriptor?? [ 245.955630][ T6005] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 245.957969][ T6005] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 246.005197][T14308] syzkaller0: entered promiscuous mode [ 246.007673][T14308] syzkaller0: entered allmulticast mode [ 246.158538][ T60] usb 5-1: USB disconnect, device number 36 [ 246.167852][ T6608] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 246.317849][ T6608] usb 8-1: Using ep0 maxpacket: 32 [ 246.321485][ T6608] usb 8-1: config 0 has an invalid interface number: 169 but max is 0 [ 246.325191][ T6608] usb 8-1: config 0 has no interface number 0 [ 246.328253][ T6608] usb 8-1: config 0 interface 169 has no altsetting 0 [ 246.333581][ T6608] usb 8-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 246.337911][ T6608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.341397][ T6608] usb 8-1: Product: syz [ 246.343263][ T6608] usb 8-1: Manufacturer: syz [ 246.345301][ T6608] usb 8-1: SerialNumber: syz [ 246.350355][ T6608] usb 8-1: config 0 descriptor?? [ 246.407872][ T5929] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 246.557951][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 246.561714][ T6608] usb-storage 8-1:0.169: USB Mass Storage device detected [ 246.562446][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.565865][ T6608] usb-storage 8-1:0.169: Quirks match for vid 0781 pid 0001: 1 [ 246.570392][ T5929] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 246.573981][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.577639][ T5929] usb 6-1: Product: syz [ 246.579940][ T5929] usb 6-1: Manufacturer: syz [ 246.581800][ T5929] usb 6-1: SerialNumber: syz [ 246.585342][ T5929] usb 6-1: config 0 descriptor?? [ 246.588843][ T5929] usb 6-1: no audio or video endpoints found [ 246.621355][ T6608] usb 8-1: USB disconnect, device number 44 [ 246.732849][T14338] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 246.735421][T14338] pim6reg1: linktype set to 776 [ 246.791982][ T6608] usb 6-1: USB disconnect, device number 42 [ 246.834953][T14346] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 246.896783][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 247.092308][T14370] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3530'. [ 247.470679][ T40] audit: type=1326 audit(1763452476.378:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.1.3550" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x0 [ 247.587862][ T6608] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 247.677980][ T5946] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 247.737898][ T6608] usb 8-1: Using ep0 maxpacket: 32 [ 247.741023][ T6608] usb 8-1: config 0 has no interfaces? [ 247.742946][ T6608] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.745978][ T6608] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.750560][ T6608] usb 8-1: config 0 descriptor?? [ 247.840229][ T5946] usb 5-1: config 0 has no interfaces? [ 247.842719][ T5946] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 247.846761][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.852570][ T5946] usb 5-1: config 0 descriptor?? [ 247.956909][ T5946] usb 8-1: USB disconnect, device number 45 [ 248.057122][ T6023] usb 5-1: USB disconnect, device number 37 [ 248.461586][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'. [ 248.893547][T14462] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3570'. [ 248.897199][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 248.945927][T14466] hub 8-0:1.0: USB hub found [ 248.947881][T14466] hub 8-0:1.0: 1 port detected [ 249.285443][T14491] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 249.325201][T14496] dns_resolver: Unsupported content type (4) [ 249.361166][T14502] IPVS: length: 121 != 8 [ 249.403699][T14507] bond1: option resend_igmp: invalid value (2880) [ 249.405921][T14507] bond1: option resend_igmp: allowed values 0 - 255 [ 249.412160][T14507] bond1 (unregistering): Released all slaves [ 250.013884][T14563] ip6gretap0 speed is unknown, defaulting to 1000 [ 250.713802][T14579] syzkaller0: Caught tx_queue_len zero misconfig [ 250.840947][T14595] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 250.849067][T14595] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.139934][T14625] ip6gretap0 speed is unknown, defaulting to 1000 [ 251.309349][T14633] block nbd0: Unsupported socket: should be TCP or UNIX. [ 251.864356][T14670] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3665'. [ 251.867218][T14672] tipc: Enabling of bearer rejected, failed to enable media [ 251.868000][T14670] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3665'. [ 252.702240][T14702] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3680'. [ 252.858594][T14717] delete_channel: no stack [ 252.891876][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3686'. [ 252.898287][T14727] netlink: 'syz.1.3690': attribute type 1 has an invalid length. [ 252.921808][T14730] program syz.0.3691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.934615][T14735] tipc: Started in network mode [ 252.936310][T14735] tipc: Node identity 623a6154df58, cluster identity 4711 [ 252.940608][T14735] tipc: Enabled bearer , priority 0 [ 252.944701][T14735] syzkaller0: MTU too low for tipc bearer [ 252.947060][T14735] tipc: Disabling bearer [ 253.275490][T14774] ip6gretap0 speed is unknown, defaulting to 1000 [ 254.050981][T14857] netlink: 'syz.3.3748': attribute type 10 has an invalid length. [ 254.139144][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 254.180811][T14874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3756'. [ 254.287905][ T6608] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 254.457891][ T6608] usb 6-1: Using ep0 maxpacket: 32 [ 254.462336][ T6608] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.465988][ T6608] usb 6-1: config 0 has no interface number 0 [ 254.472367][ T6608] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.476602][ T6608] usb 6-1: config 0 interface 2 has no altsetting 0 [ 254.481079][ T6608] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 254.484299][ T6608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.487594][ T6608] usb 6-1: Product: syz [ 254.489736][ T6608] usb 6-1: Manufacturer: syz [ 254.491370][ T6608] usb 6-1: SerialNumber: syz [ 254.495392][ T6608] usb 6-1: config 0 descriptor?? [ 254.576324][T14920] Invalid option length (1048395) for dns_resolver key [ 254.676126][T14934] overlayfs: failed to resolve './file0': -2 [ 254.700723][ T6608] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.912138][T14972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3794'. [ 254.917721][ T6608] usb 6-1: USB disconnect, device number 43 [ 255.160385][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.163148][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.351620][T15018] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.357024][T15018] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 255.435476][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3809'. [ 255.530671][T15035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 255.681255][T15052] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 256.007874][ T40] audit: type=1326 audit(1763452484.908:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.2.3836" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x0 [ 256.197889][ T10] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 256.254355][T15113] netlink: 'syz.1.3845': attribute type 1 has an invalid length. [ 256.305901][T15113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.309694][T15113] bond1: (slave bond2): making interface the new active one [ 256.312807][T15113] bond1: (slave bond2): Enslaving as an active interface with an up link [ 256.319528][T15113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3845'. [ 256.349282][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 256.353767][ T10] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 256.357598][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.364703][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.374156][ T10] usb 8-1: config 1 has no interface number 1 [ 256.376863][ T10] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 256.383920][ T10] usb 8-1: config 1 interface 2 has no altsetting 0 [ 256.389604][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.393691][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.396712][ T10] usb 8-1: Product: syz [ 256.397310][T15189] fuse: Bad value for 'fd' [ 256.398446][ T10] usb 8-1: Manufacturer: syz [ 256.398456][ T10] usb 8-1: SerialNumber: syz [ 256.608015][ T10] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 256.610616][ T10] usb 8-1: 2:1 : format type 9 is not supported yet [ 256.612917][ T10] usb 8-1: selecting invalid altsetting 0 [ 256.623261][ T10] usb 8-1: USB disconnect, device number 46 [ 257.227885][ T60] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 257.388680][ T60] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 257.398192][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.401925][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.406431][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.411381][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.414357][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.420999][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.424948][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.430828][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.435350][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.439338][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.443149][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.448254][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.452083][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.455865][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.460620][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.464763][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.469056][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.473600][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.476955][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.481481][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.487199][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.491936][ T60] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.495396][ T60] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.500360][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.505349][ T60] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 257.509717][ T60] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 257.513306][ T60] usb 5-1: Product: syz [ 257.515164][ T60] usb 5-1: Manufacturer: syz [ 257.517219][ T60] usb 5-1: SerialNumber: syz [ 257.521885][ T60] usb 5-1: config 0 descriptor?? [ 257.530962][ T60] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 257.735496][ T6023] usb 5-1: USB disconnect, device number 38 [ 257.738828][ T6023] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 258.433305][T15370] ip6gretap0 speed is unknown, defaulting to 1000 [ 258.434113][T15375] Bluetooth: MGMT ver 1.23 [ 258.571440][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3920'. [ 258.706923][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 258.711864][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 258.716103][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 258.724822][T15430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.207854][ T6006] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 259.358096][ T6006] usb 6-1: Using ep0 maxpacket: 8 [ 259.364220][ T6006] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.367892][ T6006] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 259.371344][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.375862][ T6006] usb 6-1: config 0 descriptor?? [ 259.552880][T15481] __nla_validate_parse: 14 callbacks suppressed [ 259.552892][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3950'. [ 259.558234][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3950'. [ 259.561259][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3950'. [ 259.577829][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 259.590124][ T6006] usb 6-1: string descriptor 0 read error: -71 [ 259.593034][ T6006] usb 6-1: USB disconnect, device number 44 [ 259.738658][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 259.741772][ T10] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 259.744759][ T10] usb 5-1: config 0 has no interface number 1 [ 259.751303][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 259.754606][ T10] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 259.757321][ T10] usb 5-1: Product: syz [ 259.759277][ T10] usb 5-1: Manufacturer: syz [ 259.760745][ T10] usb 5-1: SerialNumber: syz [ 259.763640][ T10] usb 5-1: config 0 descriptor?? [ 259.969954][ T10] usb 5-1: Could not set interface, error -71 [ 259.974710][ T10] usb 5-1: USB disconnect, device number 39 [ 260.166454][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'. [ 260.333562][T15562] team0: Caught tx_queue_len zero misconfig [ 260.484134][T15574] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3985'. [ 260.646460][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 260.681651][T15611] input: syz1 as /devices/virtual/input/input14 [ 260.777918][ T6006] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 260.939223][ T6006] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 260.942231][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.946027][ T6006] usb 5-1: config 0 descriptor?? [ 260.949969][ T6006] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 261.252438][T15685] ip6gretap0 speed is unknown, defaulting to 1000 [ 261.353041][ T6006] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 261.403643][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4033'. [ 261.465428][T15719] tipc: Enabling of bearer <Ýth:h> rejected, media not registered [ 261.553434][ T6006] gspca_cpia1: usb_control_msg 01, error -32 [ 261.558744][ T6006] gspca_cpia1: usb_control_msg 01, error -32 [ 261.561203][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 261.563626][ T6006] gspca_cpia1: usb_control_msg 01, error -32 [ 261.565898][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 261.568559][ T6006] gspca_cpia1: usb_control_msg 01, error -32 [ 261.570768][ T6006] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 261.579149][ T6006] usb 5-1: USB disconnect, device number 40 [ 262.009275][T15776] futex_wake_op: syz.3.4059 tries to shift op by 32; fix this program [ 262.149250][T15789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.523787][T15812] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 262.701554][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.713361][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.717419][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.720889][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.723849][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.745594][T15818] ip6gretap0 speed is unknown, defaulting to 1000 [ 262.825287][T13721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.918448][T13721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.956230][T15818] chnl_net:caif_netlink_parms(): no params data found [ 262.959571][ T60] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 263.068583][T13721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.076035][T15818] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.079928][T15818] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.082392][T15818] bridge_slave_0: entered allmulticast mode [ 263.085176][T15818] bridge_slave_0: entered promiscuous mode [ 263.088773][T15818] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.091215][T15818] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.093730][T15818] bridge_slave_1: entered allmulticast mode [ 263.096605][T15818] bridge_slave_1: entered promiscuous mode [ 263.109324][ T60] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 263.114136][ T60] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 263.119166][ T60] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 263.123884][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.127351][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.165189][T15818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.178973][T13721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.187418][T15818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.279111][T15818] team0: Port device team_slave_0 added [ 263.282670][T15818] team0: Port device team_slave_1 added [ 263.348760][T15818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.350592][ T5945] Bluetooth: hci1: unexpected event for opcode 0x204e [ 263.351061][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.363773][T15818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.384317][T15818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.386654][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.398340][T15818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.707917][T13721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.712503][T13721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.719162][T13721] bond0 (unregistering): Released all slaves [ 263.739944][T15818] hsr_slave_0: entered promiscuous mode [ 263.742299][T15818] hsr_slave_1: entered promiscuous mode [ 263.802836][T13721] tipc: Disabling bearer [ 263.815188][T13721] tipc: Left network mode [ 264.138825][T13721] hsr_slave_0: left promiscuous mode [ 264.140987][T13721] hsr_slave_1: left promiscuous mode [ 264.143886][T13721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.146899][T13721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.160769][T13721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.163570][T13721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.201160][T13721] veth1_macvtap: left promiscuous mode [ 264.203237][T13721] veth0_macvtap: left promiscuous mode [ 264.206107][T13721] veth1_vlan: left promiscuous mode [ 264.208045][T13721] veth0_vlan: left promiscuous mode [ 264.770860][ T5945] Bluetooth: hci3: command tx timeout [ 264.917964][T13721] team0 (unregistering): Port device team_slave_1 removed [ 264.990772][T13721] team0 (unregistering): Port device team_slave_0 removed [ 265.831631][T15818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.844016][T15818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.846549][ T6006] usb 5-1: USB disconnect, device number 41 [ 265.869171][T15818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.886809][T15818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.005169][T15818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.042850][T15818] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.076751][T13760] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.076881][T13721] IPVS: stop unused estimator thread 0... [ 266.079182][T13760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.100074][ T3733] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.102553][ T3733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.381847][T15818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.402460][ T5945] Bluetooth: hci0: unexpected event for opcode 0x204e [ 266.434151][T15818] veth0_vlan: entered promiscuous mode [ 266.450726][T15818] veth1_vlan: entered promiscuous mode [ 266.491907][T15818] veth0_macvtap: entered promiscuous mode [ 266.507060][T15818] veth1_macvtap: entered promiscuous mode [ 266.522283][T15818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.535684][T15818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.551170][T13760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.555198][T13760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.561082][T13760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.567854][T13760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.615086][T13760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.617831][T13760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.636693][T13760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.639759][T13760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.767994][ T60] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 266.772616][ T60] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 266.776459][ T60] CPU: 3 UID: 0 PID: 60 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 266.781250][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.786077][ T60] Workqueue: events l2cap_info_timeout [ 266.788513][ T60] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 266.791143][ T60] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 266.799263][ T60] RSP: 0000:ffffc900009cf9f0 EFLAGS: 00010282 [ 266.801629][ T60] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 266.804655][ T60] RDX: 0000000000000000 RSI: ffffffff89267fd1 RDI: dffffc000000004c [ 266.807313][ T60] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 266.809873][ T60] R10: 00000000ffffff83 R11: 0000000000000001 R12: ffffffff89267fd1 [ 266.812426][ T60] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.815001][ T60] FS: 0000000000000000(0000) GS:ffff888097b0d000(0000) knlGS:0000000000000000 [ 266.817917][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.820144][ T60] CR2: 000000000c361e23 CR3: 00000000131c6000 CR4: 0000000000352ef0 [ 266.823489][ T60] Call Trace: [ 266.824945][ T60] [ 266.826218][ T60] __kasan_check_byte+0x13/0x50 [ 266.828325][ T60] lock_acquire+0xfc/0x350 [ 266.830243][ T60] lock_sock_nested+0x41/0xf0 [ 266.832231][ T60] ? l2cap_sock_ready_cb+0x41/0x170 [ 266.834428][ T60] l2cap_sock_ready_cb+0x41/0x170 [ 266.836578][ T60] l2cap_conn_start+0x144/0xb30 [ 266.838676][ T60] ? __pfx_l2cap_conn_start+0x10/0x10 [ 266.840995][ T60] ? __pfx___mutex_lock+0x10/0x10 [ 266.843058][ T60] ? debug_object_deactivate+0x1ec/0x3a0 [ 266.845238][ T60] l2cap_info_timeout+0x81/0xa0 [ 266.846867][ T60] process_one_work+0x9cf/0x1b70 [ 266.848557][ T60] ? __pfx_process_one_work+0x10/0x10 [ 266.850353][ T60] ? assign_work+0x1a0/0x250 [ 266.851887][ T60] worker_thread+0x6c8/0xf10 [ 266.853447][ T60] ? __pfx_worker_thread+0x10/0x10 [ 266.855129][ T60] kthread+0x3c5/0x780 [ 266.856887][ T60] ? __pfx_kthread+0x10/0x10 [ 266.858534][ T60] ? rcu_is_watching+0x12/0xc0 [ 266.860109][ T60] ? __pfx_kthread+0x10/0x10 [ 266.861642][ T60] ret_from_fork+0x675/0x7d0 [ 266.863180][ T60] ? __pfx_kthread+0x10/0x10 [ 266.864708][ T60] ret_from_fork_asm+0x1a/0x30 [ 266.866292][ T60] [ 266.867391][ T60] Modules linked in: [ 266.869131][ T60] ---[ end trace 0000000000000000 ]--- [ 266.877819][ T5945] Bluetooth: hci3: command tx timeout [ 266.898708][ T60] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 266.901431][ T60] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 266.908949][ T60] RSP: 0000:ffffc900009cf9f0 EFLAGS: 00010282 [ 266.911112][ T60] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 266.913872][ T60] RDX: 0000000000000000 RSI: ffffffff89267fd1 RDI: dffffc000000004c [ 266.917938][ T60] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 266.920654][ T60] R10: 00000000ffffff83 R11: 0000000000000001 R12: ffffffff89267fd1 [ 266.924316][ T60] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.927915][ T60] FS: 0000000000000000(0000) GS:ffff888097b0d000(0000) knlGS:0000000000000000 [ 266.930969][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.933259][ T60] CR2: 000000002df11ffc CR3: 0000000064967000 CR4: 0000000000352ef0 [ 266.935955][ T60] Kernel panic - not syncing: Fatal exception [ 266.938670][ T60] Kernel Offset: disabled [ 266.940102][ T60] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:54:55 Registers: info registers vcpu 0 CPU#0 RAX=000000000049874c RBX=0000000000000000 RCX=ffffffff8b5d92a9 RDX=ffffed1005646656 RSI=ffffffff8bf07840 RDI=ffffffff8191bf0d RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=ffff88802b23b2d8 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff90824ad0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f737a95c CR3=0000000055fc5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018400000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=00000000000006e8 RCX=ffffffff8209b05b RDX=ffff88804a77c900 RSI=ffffffff8209aafc RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000e87f780 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=00000000000106b4 R12=0000000000000001 R13=ffffc9000e87f9c8 R14=ffffea0001e2f7c0 R15=0000000000000000 RIP=ffffffff81bc57c1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809790d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034e1effc CR3=0000000055fc5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018400000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f89351 RDX=ffff888024c00000 RSI=ffffffff81f88b11 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9002693f800 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000f5204000 R13=ffff88804b774280 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8b6087a0 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ef6e40 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7396ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269d55 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc900009cf360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9adc5da0 R15=ffffffff85269cf0 RIP=ffffffff85269d7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c361e23 CR3=00000000131c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000